Opkg (uclient-fetch) can't download from https site: Invalid SSL certificate (Letsencrypt global root cert expiration)

[hnyman]

@dahan

maybe switching from wolfSSL to OpenSSL would fix this, but that seems tricky to do.

That is easy.

OpenWrt 21.02 install openssl (to replace wolfssl)

Note that if you have enough flash space, you can leave wolfssl library there, you just add the openssl library, and then provide correct variants of each app that uses SSL. For some OpenWrt core apps (like uhttpd, uclient-fetch/wget, etc.) the SSL library is hidden behind the ustreamssl library, which converts the generic SSL calls to calls specific to each SSL library variant. so the SSL lib can be changed easily. You should be able to install libopenssl install openssl-util then remove li…

Firefox error SSL_ERROR_NO_CYPHER_OVERLAP when using Luci HTTPS access

You can try that. I normally use openssl-based libustream, but just installed mbedtls for testing for you. You do not need to uninstall libmbedtls, as it should be enough to install libopenssl, uninstall libustream-mbedtls and install libustream-openssl. I went to the other direction for testing, so you should do the mirror thing than I... opkg update opkg install libmbedtls opkg remove --force-depends libustream-openssl opkg install libustream-mbedtls rm -rf /tmp/luci* /e…